Hacker News new | ask | show | jobs
by fedpost 1 day ago
Are there any real options in this space for something that is

- E2EE

- Large group capable (100+ users)

- FOSS + self hostable

- Not riddled with security issues

- Relatively easy to use for iOS and Android users (safe for normies)

I help run a Matrix server for people who are at risk from the current administration and I can attest to all of the issues mentioned plus a few more.

I'd rather not move to something as hostile as Discord and while we've tried Stoat it's infinitely more buggy and the lack of iOS apps is causing problems.

Rocket chat is interesting but E2EE is early in development, lots of security issues at last check.

Simplex isn't going to be better for large group stuff, it has the same fundamental sync issues Matrix does and the devs are more interested in crypto than fixing that.

11 comments

Nope, just Matrix. Second best option is XMPP with various cobbled together XEPs but that has its own set of problems.

For all the (sometimes rightful) grief Matrix gets, it's essentially the only solution targeting hard problems like multi-device encrypted group chats[0] or truly federated multi-user chats. It can also be a very quickly moving ecosystem, which is difficult to handle when you're an open federated spec. Hence why several of the complaints in this post are caused by old and no longer supported clients and servers.

[0] Infamously, WhatsApp and LINE both support encrypted chats but all the encryption keys are stored on your phone, so you can only have one phone working at a time and desktop access is actually routed through it.

> and desktop access is actually routed through it

I think this is not true anymore. I’ve had it working with while my phone was off.

We (https://phnx.im/about) are building something new (https://air.ms). The website doesn’t yet mention self-hosting and federation, but we’d like to get there as well. Beyond that, our focus is on combining good UX with state-of-the-art security. It might not float everybody’s boat, but it should satisfy the list above.

We are in an early phase right now, where we test the product with a limited number of people, hence the invitation-only approach. We intend to drop that towards the end of the year if all goes well.

We helped co-author MLS, and we also contribute to the MIMI IETF working group. We’d like Air to be as standards-based as possible.

We are also curious to learn about specific problems that folks think have not been solved yet in the space.

how will federation compare to Matrix?
You‘re describing Wire. One could quibble about the FOSS part but it is open source (gplv3 or agpl). It’s used by a bunch of European governments and agencies, as well as American agencies, has regular security reviews and thanks to MLS, supports groups with more than 2k clients. Self hosting is a bit of a pain, but people are doing it.

Give it a try

I would love to move to wire, but the issue I've run into is that we'd need a custom client to move push notifications off their infra and that's a non-starter for iOS users because of app store policies (thanks Apple).

We'd be happy to pay them to host but for our size we'd be paying many thousands per year which is insane for chat.

Chatto is what I am starting to lean into. Still early in development, but self-hosted version is available and the dev has been responsive and nice to chat to.
Came here to say that. https://chatto.run/
Maybe Delta Chat?

UX feels less polished yet snappier than Element-Matrix and the project seems pretty active.

https://delta.chat/

That’s Matrix. Matrix has spent too much time chasing Discord, with spaces, and group video chat, and email with federation. And too much time chasing Slack with threads. But everything you mentioned is core Matrix chat and works great on every client.
Yeah, it's a frustrating situation because we have hundreds of people and the constant state-sync issues and assorted account problems are making it hard for non-technical people to participate.
Matrix still doesn't have a client with built in push to talk as far as I'm aware. The relevant issue on the Element github has been sat there for 8 years now

It does not seem like a serious project, at least not one being developed by folks who have user experience in mind

I've never used matrix for more than 10 minutes, but I'd like to counter this with WhatsApp. WhatsApp has a swipe up to talk. This feature when used in a group effectively sends audio from you walking in your pocket to potentially thousands of people.

Internet groups are littered with complaints about this feature. But there is no way to turn it off and meta appears to not give a sh*t.

So, I'm not sure you can really argue that Matrix is not serious when that is the competition.

Same for multi-account support in Element Desktop. However: The new breed of clients (Element X) has this, along with many other improvements. This is probably what the happy user featured in the article was using. They recently (in the last few years) started to focus on UX, with what I would call some success.
They had more important user experience things to work on than push to talk (no offense)
I disagree. All these things are pretty needed. They had a lot of other projects ongoing that they spent time one, like full time developers for VR and a bunch of other things. But overall its just a tricky thing to run a project like this.
I'm sure you've tried or at least considered it, but you didn't explicitly mention it so: XMPP? The MUC extension has no problem with large groups (after a certain point you have to disable presence advertisement and reflections and whatnot, but that's way north of 100)

XMPP has several ways of doing e2ee, the most popular being OMEMO.

The challenge will be finding clients that supports OMEMO for MUCs (multi user chats) on each platform. They exist on desktop, at the very least.

This is a non-technical group so the main concern I have is the same with Element vs Element X vs Fluffy vs ......

It's definitely tempting though, it seems to be by far the most flexible solution.

It's an effect of walled gardens that the communication method is conflated with the app. But people understand well that Outlook and Thunderbird is both just email. I think this analogy helps when explaining XMPP.
XMPP
Email.
keet.io

Might be too P2P for your taste though.

Have you tried XMPP (with OMEMO)?